Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138382e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3138382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          9iIxFWSOSoxhO5O5Y9QzPxXxuRa6fNjonTGL9XkU+qA=
Subject key identifier:   17:F9:EA:D0:7B:59:D6:F6:26:56:60:7E:17:B1:60:4F:BC:F0:AA:79
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       606669FA4D5F45243A69E532DFA4D83738ABF4C9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138382e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 28 Nov 2022 11:21:58 +0000
ROA not before:           Mon 28 Nov 2022 11:16:58 +0000
ROA not after:            Mon 27 Nov 2023 11:21:58 +0000
asID:                     61138
IP address blocks:        64.50.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:69:fa:4d:5f:45:24:3a:69:e5:32:df:a4:d8:37:38:ab:f4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 28 11:16:58 2022 GMT
            Not After : Nov 27 11:21:58 2023 GMT
        Subject: CN=17F9EAD07B59D6F62656607E17B1604FBCF0AA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:e5:df:04:88:22:7a:53:50:51:cc:2e:b9:
                    23:0b:66:92:da:39:eb:04:a0:8a:06:96:c9:a6:07:
                    49:32:ff:af:01:20:49:4c:3e:dd:28:48:63:ac:77:
                    ad:d9:de:78:ae:dc:93:4c:71:68:8e:e7:e2:60:36:
                    65:ce:54:20:f5:d7:d1:5d:96:1b:58:e0:c2:56:66:
                    ff:44:46:9c:aa:97:65:7b:7a:39:87:e6:84:27:dc:
                    26:eb:e8:95:99:ce:13:09:e3:95:8f:9a:97:78:46:
                    ff:84:23:31:78:d4:36:1d:ea:4b:a5:73:fc:49:d8:
                    cf:ea:b5:ef:05:be:06:6f:90:9f:8c:3c:10:e7:89:
                    ad:24:99:32:fe:b1:bf:eb:1a:ae:a4:7f:1d:4e:97:
                    a8:d5:c0:47:ec:32:77:47:e7:63:a2:1d:dd:15:c7:
                    0b:60:05:5a:d3:3c:4d:78:76:78:80:ca:9a:14:0c:
                    ae:17:ca:ac:00:6c:e7:93:9c:6f:84:d0:9f:a8:fd:
                    d3:8b:9d:ed:39:17:1e:e6:2f:30:a3:9b:4f:58:b5:
                    76:e0:2f:47:33:ff:5a:76:31:b1:d6:d0:73:21:0e:
                    0c:c5:9a:7e:93:10:3b:25:c6:4f:27:89:bc:cc:1d:
                    7e:b2:fa:a2:46:f1:51:47:ea:d5:a0:10:bf:66:72:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:EA:D0:7B:59:D6:F6:26:56:60:7E:17:B1:60:4F:BC:F0:AA:79
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36342e35302e3138382e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:5e:a9:5b:c3:cc:aa:f1:73:f2:f0:cc:6f:bc:f1:27:1f:
         3d:bb:b4:ae:cf:5f:41:10:2e:9a:36:c5:d0:c6:25:f0:8c:5f:
         3e:13:14:c0:a0:08:24:2b:69:1f:1e:a8:c8:ac:d4:2d:57:a6:
         7f:7b:b2:2e:ee:5d:b5:b5:32:a4:67:94:ac:6e:42:6d:e2:92:
         41:9c:20:8d:6b:ff:86:58:9d:67:04:d8:e0:1f:fc:f9:26:d3:
         7f:49:f8:d7:77:60:68:ae:ca:f9:07:0d:37:62:b1:30:3b:53:
         c1:1d:5d:86:a9:8c:e6:e0:c6:a3:0a:a4:24:b5:03:cb:a9:1e:
         40:08:b0:0f:14:e5:d6:84:60:9b:fd:1a:e5:48:bb:11:dc:f0:
         46:9a:0b:49:50:2b:b7:5a:c9:56:ed:d7:87:19:91:3f:bd:5e:
         89:57:a1:b5:ea:80:b8:a1:a1:9b:02:b8:5f:9f:73:65:a6:af:
         88:53:11:eb:9d:ba:1a:92:d8:db:af:bb:ef:f6:7f:37:48:25:
         f1:31:93:56:02:a9:69:ed:aa:b5:e8:39:70:3b:8a:13:7a:1d:
         bd:45:0c:a0:c3:c1:84:5f:68:4f:62:50:41:80:95:51:51:e5:
         01:69:8f:b8:ec:60:ce:b0:4e:b4:2f:ec:09:70:7f:86:76:3b:
         79:ec:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----